VULNERABILITY INTELLIGENCE

CVE-2026-91119

CVSS score6.4 MEDIUM

EPSS probability0.80%

CISA KEVNot currently listed

Published2026-09-24

Last modified2026-09-28

Description

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form action_code_who value into mention-link href attributes without URL encoding. A quote-bearing display name could …